IOM Setup integrated with OAM in HA using separate domains

Similar Questions

• Integration of OBIEE 11.1.1.5 with OAM

  Hello
  I joined OBIEE 11.1.1.5 with OID11g (as part of the integration of the OAM), all users OID translate into obiee. IM able to connect to, in the "analytical", but not able to access reports. Also I am not able to assign groups BI for users of the OID.
  Has anyone done this kind of a scenario facing? Can someone help me please?
  If someone did obiee 11.1.1.5 integration integration with oam 11 g, please provide me with the document that you have followed.
  
  Thanks in advance,
  Faye farsatha.
  
  Published by: 927873 on July 16, 2012 12:11 AM

  Hello

  Please try to access the Web analytics services using 'Analytics-ws' instead of just 'analytical' in the URL like below,

  http://:/analytics-ws/saw.dll? WSDL

  Do a test with link below it may help you...
  http://onlineappsdba.com/index.php/2011/12/05/integrate-OBIEE-11g-with-OAM-11g-for-single-sign-on-in-13-steps/
  http://fusionsecurity.blogspot.com/2012/06/integrating-OBIEE-11g-into-weblogics.html
  http://docs.Oracle.com/CD/E23943_01/bi.1111/e10543/SSO.htm#CEGJBAED

  Thank you
  Deva

• BI publisher integrated with OBIEE?

  Dear Experts,

  
  

  
  

  
  

  oracle.xdo.servlet.security.AdminUser cannot be cast to oracle.xdo.servlet.security.DirectoryUser

  
  

  BI publisher integrated with OBIEE, but I use security as a guarantee of Bi Publisher.

  I created a role in the bi Publisher and trying to assign the report, but it shows the above mentioned error.

  Can use us the Editor while only integrated with OBIEE bi security?

  
  

  Thanks in advance!

  
  

  
  

  
  

  
  

  Hello Vinay,

  You can't use template security BI Publisher when the BEEP is integrated with OBIEE. You must use the Oracle Fusion Middleware security model in this case because OBIEE manages access. Security model BI Publisher can be used when you use a Simple installation, no installation of the company. To create the roles when you use Oracle Fusion Middleware I recommend you follow our manual steps: http://docs.oracle.com/cd/E28280_01/bi.1111/e22255/config_sec.htm#BIPAD132

  BR,

  Liviu

• Problem with OAM OIM integration using OVD

  Hello
  
  I am trying to integrate 11.1.1.5 OAM and IOM help OVD.
  
  I already have set up LDAPSynch and have prepared the store ID as well.
  
  In the integration of OAM - IOM when I specify the OVD 6501 port in the properties file and to run the tool of idmConfig - configOAM, I get the following error:
  
  9 April 2012 10:05:43 oracle.idm.automation.util.Util setLogger
  WARNING: Logger initialized in focus mode warning
  9 April 2012 10:05:52 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler run
  MORE FINE: ENTRY
  9 April 2012 10:06:24 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler configOAM11gIdStore
  MORE FINE: ENTRY
  9 April 2012 10:06:24 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler configOIMIntegration
  FINER: Creating mbean connection
  9 April 2012 10:06:27 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler configOIMIntegration
  More FINE: Connection created mbean
  9 April 2012 10:06:27 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler getFoundationConfigMBean
  MORE FINE: ENTRY
  9 April 2012 10:06:28 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler getFoundationConfigMBean
  FINER: COM. ORACLE. OAM:LOCATION = ADMINSERVER, NAME IS OAMWLST, TYPE = OAM. WLST, APPLICATION = OAM_ADMIN, APPLICATIONVERSION = 11.1.1.3.0 RETURN
  9 April 2012 10:06:28 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler configOIMIntegration
  FINER: Invoking mbean
  9 April 2012 10:06:28 oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler configOAM11gIdStore
  SEVERE: Error during Setup webgate and area
  java.lang.NullPointerException
  at oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler.configOAM11gIdStore(OAM11gIntegrationHandler.java:368)
  at oracle.idm.automation.impl.oam.handlers.OAM11gIntegrationHandler.execute(OAM11gIntegrationHandler.java:696)
  at oracle.idm.automation.AutomationTool.configOAM(AutomationTool.java:593)
  at oracle.idm.automation.AutomationTool.parseCmdLine(AutomationTool.java:218)
  at oracle.idm.automation.AutomationTool.main(AutomationTool.java:132)
  
  
  Someone has encountered this problem before? Can you please pass on the resolution?
  
  
  Please note: if I specify the OID 3060 port and run the configOAM, there is no problem!
  
  
  Thank you
  
  Raphael...

  Uncheck the box "Enable access control" in the settings of the OVD Server / bounce IAM Suite servers and try again your script

• Integration of OAM (11.1.2.0.0) with the OIF (11.1.1.2.0) and the Protection of resources

  Hi Oracle community!  It's my first post here on the forums, so please bear with me.

  I have a question about the integration between the IOF, acting as an IdP and OAM as the authentication engine.  I'll start with our Setup and the way we protect resources and then finally to deliver my ultimate question.

  First things first:

  We use the OIF 11.1.1.2.0 and OAM 11.1.2.0.0 (looking at upgrading OAM/OIF soon to 11.1.2 patch set 2, so we get full OIF blown in OAM packet and not only the part of MS).

  I essentially was self-taught in the integration of the products and did the best that I can.  We have that in the production running the full blown federations now, so that we know that we are doing something good.  I won't say that we have done is the perfect solution, but it is the way in which we understand how products interact and worked at the time.

  We have OIF, acting as an IdP (without SP yet), configured to use our OAM authentication search engine.  According to the documentation, we read through, when this configuration occurs, when the IOF receives a request to start the process of Federation (/ fed/PDI/initiatesso? providerid = XXXXXX), she sees the user is not authenticated and will forward to the authentication engine.  In our case, this means that we forwards the request to an internal flow in the OIF (/ fed/user/authnoam11g) which crosses the webgate, then check with OAM, if it is a resource that is protected or not.  In OAM, we defined a resource to protect/fed/user/authnoam11g so she who collects and authenticates the user via the policy regime, etc.  Once that ends, she goes back to the OIF to finish the assertion.

  Keep in mind, I'm aware of a lot more of what's going on in the process, but it's the main room that will be the basis of my question.

  So than stated above, we have a single policy protected for all federations from the OIF since "out of the box" OIF doesn't have several URL structures that it will send to OAM based on service provider being accessible.  For me, this is a small problem because I want to perform specific authorization controls in OAM based on the providerid who had been requested to the OIF.  OIF, as far as I know, completely removes the URL of origin that was requested and query parameters (for example providerid) which means that I have little or no information of the initial request to any robust condition checks in the policies of the OAM.

  My question to the community would be:

  Is it possible for the headers of the OIF or query string parameters to be going to OAM via header variables/session variables/etc. and then accessible through licensing of OAM requirements to do solid state audits in order to allow/deny access based on rules?

  A small example:

  I am a customer who asks the following Federation on OIF:

  1. https://oifhost/fed/IDP/initiatesso?ProviderID=partnerAlias GOLD https://oifhost/FED/IDP/samlv20 <-the samlv20 would include a request for authentication with the good provider
  2. IOF receives the request and begins creating processes and the SAML assertion.  It is determined that the user is not authenticated, so OIF will forward to the authentication engine.
  3. OIF transmits to the https://oifhost/fed/user/authnoam11g
  4. OAM protects the url "/ fed/user/authnoam11g" to make the authentication/authorization.
  5. The point of authorization, I want to build conditions that are basically looking for the "providerid" in initial demand to run specific rules to allow/deny cons.  Currently, it is not possible that I know, and that's what I want to know.
  6. Once the authentication/authorization, OAM refers the request to the OIF where he finished the SAML flow and sends the statement to MS.

  In step 5, I would need a mechanism to find the providerid (value of the header, cookie, session, etc.)

  I posted this same question on another blog of Oracle and received a reply that I want to do with the current configuration is not supported.  In order for me to get the desired result, I need to upgrade to patch set 2 of OAM with the fully integrated OIF.

  See response to blog here:

  https://blogs.Oracle.com/dcarru/entry/authorization_in_oif_idp#comments

• Informatica Application with OAM 11g Setup

  Hello
  
  
  Could someone help me to protect Informatica application with OAM 11 g.
  
  
  
  
  
  Thank you
  Sony

  -First thing you can do is ask Oracle (support.oracle.com) if they have no documentation for the integration of OAM with Informatica.
  - Alternatively, you can check out the link here, which has steps of OAM integration with various third-party applications
  http://docs.Oracle.com/CD/B28196_01/idmanage.1014/b25347/Siebel.htm#Siebel

  You must have the location of the repository informatica, portnumbers etc. Try configurations by seeing examples in above link.

  Kind regards
  GP

• OIM 11 g identity Administration with OAM 11 g.

  Hello
  
  After installation and configuration of OIM 11 g, configure the feature "activate with OAM administration identity"?
  
  I go to the docs, but I couldn't find how to do it after having configured the IOM Server?
  
  Concerning
  Krishna

  Krishna,

  Have a look at below article in Oracle support site:

  Integration of OIM 11g with Ldap Sync, OAM, and BI Publisher? [1225404.1 ID]

  This article tells points below:

  Goal
  It must integrate OIM 11 g with 'LDAP Sync', 'OAM' and 'BI Publisher"when the IOM set up (using config.sh or bat) for the first time, or can it be done later?

  Solution
  -BI Publisher: Yes, it is possible to integrate the IOM after IOM is configured and installed with BI publisher. You can use the Enterprise Manager (em) console to change the URL of BI Publisher to configure with the IOM.

  -Ldap Sync: it is also possible to integrate Ldap with IOM after IOM synchronization is installed. Please refer to the Note: 1272682.1 for more information.

  -OAM: This can only be configured once during the configuration of the IOM when installing the IOM for the first time. Subsequently configuration is not supported.

  Thank you
  GK

• BEEP 11.1.1.5 Oracle compatibility with OAM/OIM 11 g 2

  Hi Experts,

  I tried searching in the matrix certification BI for compatibility support of BEEP with OAM/OIM 11 g 2, but could not find everything concerning 11.1.1.5. All I could see is 11.1.1.7.

  Can someone let me know if BI Publisher version 11.1.1.5 is supported with OAM/OAM 11.1.1.2 BP05 (GR 11, 2)?

  Please share any related information.

  Thank you.

  Shivam

  You specify the exact version of OIM/OAM, IE 11 GR 2 PSx?

  BP5 for 11 GR 2 PS2 I guess?

  PS3 comes with BEEP automatically installed 11.1.1.7

  PS2 requires you to install + 11.1.1.6

  Ps1 requires 11.1.1.5 +

  Anyway, the integration is very loose. OAM/IOM are delivered with some reports and what is required is that BEEP can open and process these reports. I do not in anyway format of relationship between versions changes.

• OEDQ integration with Active Directory - disable SSL

  Hi mates,

  I just installed OEDQ (latest version) on a Unix machine (deployed on WebLogic Server 10.3.6) but I have a few concerns:

  • SSL communications -> is mandatory? I mean, I tried to expose dndirector via a Server Web Apache OHS admin page. I am able to access the page from admin in raw mode, but every time I try to access a specific feature (dashboard, user management, server configuration, etc.) I am redirected to https://< web-server-hostname >: < wls-server-ssl-port > / dndirector, if this is not what I expect. What's wrong? Moreover, if SSL is required, is there a way to expose the console via apache (avoiding any redirect)?
  • OEDQ with Active Directory -> documentation- OEDQ integration with Active Directory - covers just Single Sign-on configuration (on the two Windows/Unix os). What about a simple configuration pointing to an external ldap? The documentation States the following statement:

  It is also possible to configure OEDQ to work with servers of different directory for authentication of users and the identification of the user. For more information on the alternative configurations, "see"contact us" "

  So, how can I achieve this?

  Pointers?

  Thanks in advance,

  Marco

  Marco

  Here is an example configuration that can be used to integrate with AD.  Create a folder called Security in your Disqualification configuration directory, and save the file in this folder as login.properties.  There are a few supporinting of documentation online this process in aid of the Disqualification.

  Here is the file, I'll add a few notes below:

  realms                        = internal, adgss                           = false
  
  ad.realm                      = EXAMPLE.COMad.auth                       = ldapad.auth.bindmethod            = digest-md5ad.auth.binddn                = search: sAMAccountNamead.ldap.server                = dc.example.comad.ldap.auth                  = simplead.ldap.user                  = [email protected]                    = testad.ldap.profile               = adsldapad.ldap.prof.defaultusergroup = testgroupad.ldap.prof.useprimarygroup  = false
  

  The kingdoms line indicates that the 'internal' (Disqualification internal users such as dnadmin) Kingdom and the Kingdom of AD should be used.  Once you are satisfied with the integration of ads you can remove the internal domain and use AD exclusively.  The domain property sets the name of the field AD - here I used EXAMPLE.COM.

  The server property sets the DNS name of the AD server.  If omitted, it is looked up in the DNS.

  The lines of the user and pw are used to connect to AD Disqualification.

  The defaultusergroup line is the name of a LDAP group that contains all users who will use the Disqualification.  The default value for this is domain users that contains usually much too many users.

  Once it is setup and working, you can go to Setup user Disqualification and see a link to external groups that attach ad with Disqualification groups groups to assign permissions to users.

  I hope this helps.

  Richard

• Integration with 50G

  Hello!

  Well, when I tried to compute the definite integral of | Sin x | I received the message cannot find the signin [0, 2 ft].

  

  I went in RPN mode, and this error persists. I then used [RS] [ENTER] to get the numeric result, and after awhile, I got the correct answer 4. But I can't get the answer simplely by clicking [EVAL].

  I also tried to calculate the antiderivative, and the correct answer returned Calculator -cos (x) * sign (sin (x)). I was wondering why the calculator produces an error when they apply for an accurate result (not digital, without .).

  Jack

  confirming the latest set of equations:

  

  EVAL would be = - 1

  and -> limit X PI - 0 = 1

  and the limit X-> PI = cannot determine.

  So, there's a singularity...

  Unfortunately, because of the resolution of the screen of 50 G, when the resulting equation for the indefinite integral is drawn, clear breaks in the plot IP and 2 * PI are not 100% clear.

  However, the subsequent calculations confirm that they exist.

  This is what has been shown that when the original integral from 0 to 2PI of | Sin (x) | is calculated,

  It is clear that the 50G automatically sets ON RIGOUREUX, even if it is not enabled in the (likely due to the function absolute value in the equation) indicators.

  THE rigorous is perfectly reasonably expect when the EXACT mode is selected with a function of absolute value.

  now for a pencil and paper method:

  | Sin (x) | is sin(x) from 0 to PI

  | Sin (x) | is - sin (x) IP to 2PI

  so...

  integral from 0 to 2PI of | Sin (x) | can also be expressed in

  integral from 0 to PI of Sin (x)

  +

  integral of the AP to 2PI of-sin (x)

  

  in EXACT MODE (strict mode setting is more questions)

  When EVAL would be = 4.

  I can refer you to a message done previously by Bernard Parisse (one of the developers of CASE).   Bernard said that the CASE cannot intercept all EXACT integration singularities (but it report some).

  Regarding the digital approximation method (help-> NUM) to get the result... I can't offer no answer as to the reason that the singularity is resolved.

  I've never seen a single post indicating what type of digital approximation algorithms are used for approximate integration with the 50G.  Of course, the digital approximation algorithms are distinguished by exact calculations.

  Finally, FYI, here is another good example of the use of 50G with an integral and having to use a bit of paper and pencil methodology (in this case, the method of cauchy principal value) to solve the 50G of the singularity.

  /T5/calculators/50g-numerical-integration-with-singularities/m-p/5678169#M11440

• Is there a work around to show the Site identity button when the integration with facebook like/send etc. It disappears when it comes to the page, it's because of the iframe can be done if anything.

  Is there a work around to show the Site identity button when the integration with facebook like/send etc. It disappears when it comes to the page, it's because of the iframe

  What can be done if anything.

  Pages that use "mixed content" (parts of the use of the HTTP page and some use HTTPS) are not secure against tampering, they will not display the site identity button. To resolve this problem, make sure that external resources you are incorporation are available over HTTPS and you use HTTPS to nest them.

  For example, to iframe widgets like the Facebook 'Like' buttons, make sure that your iframe use src = "https://192.168.1.20 /...". »

  See also discussion here: http://stackoverflow.com/questions/3587021/facebook-like-button-breaks-https-ssl

• How can I print with terminal server with a printer that uses a user code or identification?

  Hello

  Anyone know who to print with the Terminal Server services with a printer that uses an authentication code?

  Some printers have the ability to Setup user accounts.  When printing with the Terminal services Server the printer displays "authentication failure".

  We have customers who use XP, VISTA and 7.

  The servers run Win2003R2, Win2008, Win2008R2.

  All the drivers for the printers are installed on the client & server.

  Thank you!

  Hi Mattttie,

  Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows 7 networking forum.

  http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

  I hope this helps!

• SX 20 integration with VCS

  Hello

  Is it possible to integrate 20 SX with VCS.

  Because our customer want to integrate with their MS Lync TP, so found that VCS can do this job. Then please suggest...

  Here also to point out that we are planing to use the public IP address for SX 20 to receive incoming calls from the public IP address, as it will be integrated with ISDN gateway.

  Details of the product for this solution:

  VCS

  SX 20

  TP ISDN Gateway

  Thanks in advance...

  Kind regards

  Daniele

  Yes, its possible, check this.

• Replacement of 6000 MXP Integrator with unique display. C40 SX20 vs?

  I have to make a quick decision and my CISCO sales representative is MIA :(

  We have a bunch of 6000 s MXP (package ingegrator), I would like to replace. They are simple installations with a single monitor on a roll integer grid.

  with output to the screen and a camera is there any point to spend the extra money for a C40 vs getting a SX20? From a point of view video capability they look pretty well. C40 more things gets me in the back, but it is a pretty simple setup.

  Just looking for what people here could do?

  Thank you!

  Although C40 and SX20 are two different solutions for videoconferencing from Cisco, an integrator (c40) and other is fast setting solution (SX20).

  The SX20 Quick Set is designed to provide multi-party and Conference video to high definition with the flexibility to adapt to various configurations - all at a value price and size of the room.

  C40 is for Integrator supports for integration with 3 party like crestron devices, mixers.

  two take in charge the premium 1080 p solution.

  both are excellent solutions and are mind blowing in the feature and the feature as compare to the MXP series.

  You can't go wrong with either.

• Integration with the PIX IDS firewall

  I read the Release Notes for Cisco Intrusion Detection System Sensor Version 3.0 S4 (1), and tripped on the new features of this version it pretends the integration with the PIX firewall

  How do implement you this? What kind of integration offer?

  Instructions for the sensor and the basic configuration of PIX can be found here:

  http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/csids/csids8/13870_01.htm#xtocid23

  Instructions for sensor and PIX SSH configuration can be found here:

  http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/csids/csids8/13870_01.htm#xtocid16

  You can configure the sensor to connect to the PIX via telnet when

  using the PIX inside interface, otherwise you have to use SSH.

  SSH with 3des encryption is supported in version 3.0 or later

  sensors for connections of PIX.

  Warning: If you use telnet with a version 6.2.1 or PIX more late or if

  you want to use SSH with encryption on any PIX, so you

  need a patch for your sensor. If so, open a case of TAC and demand

  the latest version of nr.managed engineering. Reference

  [email protected] / * / for any question.